Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e20323135333634.roa
File: 3130332e3232342e39322e302f32342d3234203d3e20323135333634.roa (raw, json)
Hash identifier: t4Lx+Yn83FYd+xTBnl1VVFHcESl5saWp7UcUojrRTQw=
Subject key identifier: CF:B5:70:2B:7D:B1:2E:67:1F:47:60:61:13:B6:80:44:A2:F5:E3:A0
Certificate issuer: /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial: 2EA0055080ACFEBC8F79EC26C0CCC5452AC2B098
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject info access: rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e20323135333634.roa
Signing time: Thu 29 Aug 2024 02:30:04 +0000
ROA not before: Thu 29 Aug 2024 02:25:04 +0000
ROA not after: Thu 28 Aug 2025 02:30:04 +0000
asID: 215364
IP address blocks: 103.224.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a0:05:50:80:ac:fe:bc:8f:79:ec:26:c0:cc:c5:45:2a:c2:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF50000
Validity
Not Before: Aug 29 02:25:04 2024 GMT
Not After : Aug 28 02:30:04 2025 GMT
Subject: CN=CFB5702B7DB12E671F47606113B68044A2F5E3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:77:4d:96:1c:22:62:59:ee:55:e3:8d:03:
6c:c6:aa:a5:79:1e:8d:6e:9d:6d:06:aa:53:ac:2d:
69:15:40:15:fa:ba:28:f4:2a:3f:10:cb:ca:fd:fb:
d9:cd:ee:37:7b:ca:df:c5:12:4c:0c:99:11:77:36:
ed:9b:c0:03:34:5b:36:61:12:8d:57:91:7f:87:a6:
73:8b:4e:38:6d:5d:5b:31:13:a2:8f:ff:93:98:b2:
41:42:05:56:22:fd:8f:2c:58:e0:6e:6f:39:4a:11:
33:f4:57:44:ad:4d:5a:4c:aa:99:fd:3a:dc:cf:95:
f2:8e:0a:d4:a2:16:e2:52:99:98:3d:9b:77:46:dc:
10:40:18:b0:3b:c7:58:e8:ba:2d:79:3d:39:03:d7:
ab:80:e7:4e:bd:8e:7c:e3:74:e9:1f:47:90:3d:30:
74:f8:d2:58:e0:61:e3:64:cd:3d:dd:64:b9:9c:dd:
92:10:19:c5:ff:7c:92:53:46:b8:0e:35:ce:8e:78:
b7:70:5e:81:9a:b8:ef:df:5f:3f:4f:73:af:2b:59:
65:ab:0d:dc:23:67:54:7b:e8:be:83:71:b8:a2:86:
67:5b:07:ce:93:f7:5e:69:ba:95:7e:69:9b:29:ba:
b8:39:7c:d5:0c:c9:88:46:40:a3:84:eb:74:df:0c:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:70:2B:7D:B1:2E:67:1F:47:60:61:13:B6:80:44:A2:F5:E3:A0
X509v3 Authority Key Identifier:
keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e20323135333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.92.0/24
Signature Algorithm: sha256WithRSAEncryption
23:57:63:7f:4b:cd:9b:62:9b:07:ec:70:46:61:f3:c9:f1:2f:
bf:4c:d7:7e:ed:28:78:6b:1c:60:85:60:69:97:15:31:c4:fa:
d2:e1:78:4d:e4:66:d8:24:fe:52:e7:4a:1c:c6:10:f9:75:99:
2c:86:95:bf:73:8e:f6:92:f5:6e:3e:fe:ad:b5:fe:76:40:36:
71:e6:5f:ac:3a:cd:6c:9d:af:49:93:a4:57:b0:ba:34:43:1d:
51:ce:04:d4:07:3c:59:95:9f:29:e5:6e:d0:77:27:03:37:a1:
d2:9c:6d:3a:7c:51:7a:5d:5b:13:02:f1:54:d7:76:ef:a5:74:
27:ad:04:0c:98:1d:76:97:ba:30:20:61:65:88:3d:54:e5:5a:
8b:36:d4:18:f0:bf:b4:bf:ec:7e:19:5a:c4:8f:d7:63:41:93:
54:94:84:33:9b:c9:e9:ec:6c:57:6f:c0:21:e6:4c:7a:be:b9:
16:c9:78:68:d4:e8:04:a6:2a:87:fe:cd:d7:30:cd:ed:cd:2c:
fd:6d:78:16:ad:7d:cb:64:d8:da:ed:43:b8:7c:79:db:b2:ef:
17:c7:cc:e0:ac:fe:80:a6:2b:b7:60:0d:15:70:8a:39:69:c8:
33:49:57:13:d1:0d:86:2f:26:01:fd:67:ee:1d:1e:95:e1:72:
b0:06:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:43 2025 by rpki-client